forked from rcbops/rpc-openstack
/
user_variables.yml
45 lines (40 loc) · 1.62 KB
/
user_variables.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
---
# Copyright 2015, Rackspace US, Inc.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
# Nova overrides
nova_cross_az_attach: False
nova_rpc_conn_pool_size: 180
nova_rpc_response_timeout: 180
nova_rpc_thread_pool_size: 180
# Neutron overrides
neutron_rpc_conn_pool_size: 180
neutron_rpc_response_timeout: 180
neutron_rpc_thread_pool_size: 180
## Apache SSL Settings
# These do not need to be configured unless you're creating certificates for
# services running behind Apache (currently, Horizon and Keystone).
ssl_protocol: "ALL -SSLv2 -SSLv3"
# Cipher suite string from https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/
ssl_cipher_suite: "ECDH+AESGCM:DH+AESGCM:ECDH+AES256:DH+AES256:ECDH+AES128:DH+AES:ECDH+3DES:DH+3DES:RSA+AESGCM:RSA+AES:RSA+3DES:!aNULL:!MD5:!DSS"
# Keystone overrides
keystone_token_provider: "keystone.token.providers.uuid.Provider"
keystone_token_driver: "keystone.token.persistence.backends.sql.Token"
ceph_mons: >
{% set _var = [] -%}
{% if 'mons' in groups -%}
{% for mon in groups.mons -%}
{% if _var.append(hostvars[mon]['ansible_ssh_host']) -%}{% endif -%}
{% endfor -%}
{% endif -%}
{{ _var }}